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Abstract — The fading broadcast channel with confidential 
messages (BCC) is investigated, where a source node has common 
information for two receivers (receivers 1 and 2), and has confi- 
dential information intended only for receiver 1. The confidential 
information needs to be kept as secret as possible from receiver 
2. The broadcast channel from the source node to receivers 1 
and 2 is corrupted by multiplicative fading gain coefficients in 
addition to additive Gaussian noise terms. The channel state 
information (CSI) is assumed to be known at both the transmitter 
and the receivers. The secrecy capacity region is first established 
for the parallel Gaussian BCC, and the optimal source power 
allocations that achieve the boundary of the secrecy capacity 
region are derived. In particular, the secrecy capacity region is 
established for the Gaussian case of the Csiszar-Korner BCC 
model. The secrecy capacity results are then applied to give the 
ergodic secrecy capacity region for the fading BCC. 

I. Introduction 

The wire-tap channel models a communication system in 
which a source node wishes to transmit confidential informa- 
tion to a destination node and wishes to keep a wire-tapper 
as ignorant of this information as possible. This channel was 
introduced by Wyner in [1], where the secrecy capacity was 
given. The secrecy capacity of the Gaussian wire-tap channel 
was given in [2]. The wire-tap channel was considered recently 
for fading and multiple antenna channels in [3], [4]. A more 
general model of the wire-tap channel was studied by Csiszar 
and Korner in [5], where the source node also has a common 
message for both receivers in addition to the confidential 
message for only one receiver. This channel is regarded as 
the broadcast channel with confidential messages (BCC). The 
capacity-equivocation region and the secrecy capacity region 
of the discrete memoryless BCC were characterized in [5]. 
The BCC was further studied recently in [6], where the source 
node transmits two confidential message sets for two receivers, 
respectively. 

In this paper, we investigate the fading BCC, which is 
based on the BCC studied in [5] with the channels from the 
source node to receivers 1 and 2 corrupted by multiplicative 
fading gain coefficients in addition to additive Gaussian noise 
terms. We assume that the channel state information (CSI) is 
known at both the transmitter and the receivers. The CSI at 
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the transmitter (the source node) can be realized by reliable 
feedback from the two receivers, who are supposed to receive 
information from the source node. 

The fading BCC we study in this paper relates to or 
generalizes a few channels that have been previously studied 
in the literature. Compared to the fading broadcast channel 
studied in [7], [8], [9], [10], [11], the fading BCC requires 
a secrecy constraint that the confidential information for one 
receiver must be as secret as possible from the other receiver. 
The fading BCC includes the fading wire-tap channel studied 
in [12], [13] and [14] (full CSI case) as a special case, 
because the fading BCC assumes that the source node has 
a common message for both receivers in addition to the 
confidential message for receiver 1. The fading BCC also 
includes the parallel Gaussian wire-tap channel studied in [15] 
(the case where wire-tappers cooperate) as a special case for 
the same reason as above and also because a power constraint 
is assumed for each subchannel in [15]. 

In this paper, we first study the parallel Gaussian BCC, 
which serves as a basic model that includes the fading BCC 
as a special case. We show that the secrecy capacity region 
of the parallel Gaussian BCC is a union over the rate regions 
achieved by all source power allocations (among the parallel 
subchannels). Moreover, we derive the optimal power alloca- 
tions that achieve the boundary of the secrecy capacity region 
and hence completely characterize this region. In particular, 
we establish the secrecy capacity region of the Gaussian case 
of the Csiszar-Korner BCC model. 

We then apply our results to study the fading BCC, which 
can be viewed as the parallel Gaussian BCC with each fading 
state corresponding to one subchannel. Thus, the secrecy 
capacity region of the parallel Gaussian BCC applies to the 
fading BCC. In particular, since the source node knows the 
CSI, it can dynamically change its transmission power with 
channel state realization to achieve the boundary of the secrecy 
capacity region. 

In this paper, we use to indicate a group of variables 

(Xi, X2, ■ ■ ■ , Xl), and use XJ\ L -, to indicate a group of 
vectors (X™, X^ , . . . , X^), where X{ 1 indicates the vector 
(Xn, Xi2, ■ ■ . , Xi n ). Throughout the paper, the logarithmic 
function is to the base 2. 

The paper is organized as follows. We first study the 



1 



Sine 




A rate-equivocation triple (Ro,Ri,R e ) is achievable if 



Ruiiul 



Z, 



Raau-2 



Fig. 1. Parallel BCC 



parallel Gaussian BCC. We then study the fading BCC and 
demonstrate our results with numerical examples. We conclude 
the paper with a few remarks. 

II. Parallel Gaussian BCCs 

We consider the parallel Gaussian BCC with L independent 
subchannels (see Fig. [TJ, where there are one source node and 
two receivers. As in the BCC, the source node wants to trans- 
mit common information to both receivers and confidential 
information to receiver 1. Moreover, the source node wishes 
to keep the confidential information to be as secret as possible 
from receiver 2. 

For each subchannel, outputs at receivers 1 and 2 are 
corrupted by additive Gaussian noise terms. The channel input- 
output relationship is given by 

Y u = Xu + Wu, Z u = X u + V u , for I = 1, . . . , L (1) 

where i is the time index. For I = 1, . . . , L, the noise processes 
{Wk} and {Vu} are independent identically distributed (i.i.d.) 
with the components being Gaussian random variables with 
the variances fif and vf, respectively. We assume [if < vf for 
I £ A and /if > vf for I £ A c . The channel input sequence 
Xj™ L j is subject to the average power constraints P, i.e., 

n L 

^££E[Xg]<P. (2) 

A (2 nR °, 2 nRl , nj code consists of the following: 

• Two message sets: W = {1, 2, . . . , 2 nR °} and Wi = 
{1, 2, . . . , 2 nRl } with the messages Wq and W\ uni- 
formly distributed over the sets Wo and Wi, respectively; 

• One (stochastic) encoder at the source node that maps 
each message pair (wo,wi) <E (Wo,Wi) to a codeword 

X A,L]' 

• Two decoders: one at receiver 1 that maps a received 
sequence y]\ L , to a message pair (wq , wi) £ (Wo , Wi ) ; 
the other at receiver 2 that maps a received sequence Zy Y L , 

(2) 

to a message w Q £ Wo- 

The secrecy level of the confidential message W\ achieved 
at receiver 2 is measured by the following equivocation rate: 



there exists a sequence of (2 nK ° , 2 nHl , nj codes with the 
average probability of error goes to zero as n goes to infinity 
and with the equivocation rate R e satisfying 



R e < lim -H (Wx 



7 n 



(4) 



In this paper, we focus on the case in which perfect secrecy 
is achieved, i.e., receiver 2 does not obtain any information 
about the message W\. This happens if R e = R\. The secrecy 
capacity region C s is defined to be the set that includes all 
(Rq,Ri) such that (Rq, R e = Ri) is achievable, i.e., 



C„ = 



{(Ro,Ri) : (Ro,Ri,R e = Ri) is achievablej. (5) 



For the parallel Gaussian BCC, we characterize the secrecy 
capacity region in the following Theorems Q] and |2] 

Theorem 1: The secrecy capacity region of the parallel 
Gaussian BCC is 




PlO 



Pio 



log 1 



'I 



■Pll 



2 l0g l 1 + ^f 



1 1 ft , 



PlO 



PlO 



(6) 



where p is the power allocation vector, which consists of 
(piOiPii) f° r I £ A ar, d Pio for I £ A c as components. The 
set V includes all power allocation vectors p that satisfy the 
power constraint (0, i.e., 
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2jPlO+Pll] + } ]P10 < P>- (7) 
I leA is 
Proof: The achievability proof uses the following 
scheme. For / £ A, the source node transmits both common 
and confidential messages using the superposition encoding, 
and pio and pu indicate the powers allocated to transmit 
the common and private messages, respectively. For I £ A c , 
the source node transmits only the common message, and 
pio indicates the power to transmit the common message. 
The converse proof involves clever use of the entropy power 
inequality. Details of the proof can be found in [16]. ■ 
In particular, the converse proof for the parallel Gaussian 
BCC also gives the converse proof for the Gaussian BCC (L = 
1), and hence establishes the following secrecy capacity region 
for the Gaussian case of the Csiszar-Korner BCC model. 
Corollary 1: The secrecy capacity region of the Gaussian 
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where (x) + — x if x > and (x) + = if x < 0. 

Note that the secrecy capacity region of the parallel Gaus- 
sian BCC given in (0 is convex. Hence the boundary of 
this region can be characterized as follows. For every point 
(Rq,RI) on the boundary, there exist 70 > and 71 > 
such that (Rq,R*) is the solution to the following problem 



max 70-R0 + 71-R1 
(iio,fii)eCf 



(9) 



Therefore, the power allocation p* that achieves the boundary 
point (Rq,RI) is the solution to the following problem 



max j Ro(p) +jiRi(p) 
pev L — — 

70 min { i? i (p) , R02 (p) } + J1R1 (p) 



= max 



(10) 



where Ro(p) and R\{p) indicate the bounds on Rq and Ri 
in (|6j. We further define i?oi(p) and i?02(p) to be the two 
terms over which the minimization in Ro(p) is taken, i.e., 
Ro(p) = min{i? i(p), Rmip)}- The solution to ( fTot is given 
in the following theorem. The proof can be found in [16] and 
is omitted here due to space limitations. 

Theorem 2: The optimal power allocation vector p* that 
solves ( fTOt and hence achieves the boundary of the secrecy 
capacity region of the parallel Gaussian BCC has one of the 
following three forms. 

Case 1: p* = if the following p' 1 ' satisfies i?oi (p' 1 ') < 

R02 (p W ). 
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where A is chosen to satisfy the power constraint 
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Case 2: p* = p' 2 ' if the following p' 2 ' satisfies R01 (p' 

i?02 (p (2) ). 

2 
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where A is chosen to satisfy dl lb . 

Case 3: p* = p' a ' if there exists < a < 1 such that the following 

p (a) satisfies Ro! (p (o:) ) = R 02 (p (q) )- 
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Based on Theorem |2j we provide the following algorithm 
to search the optimal p*. 

Algorithm to search p* that solves j 10b 

Step 1. Find p^ 1 ' given in Case 1 in Theorem [2] 

If Roi (p (1) ) < R02 then P* = E {1) and finish - 

Otherwise, go to Step 2. 
Step 2. Find p^ given in Case 2 in Theorem [2] 

If -Roi (p (2) ) > R02 (p (2) )> then P* = E (2) and finish - 
Otherwise, go to Step 3. 
Step 3. For a given a, find p^ a ' given in Case 3 in Theorem [2] 
Search over < a < 1 to find a that satisfies 

Roi (p (a) ) = R02 (p (a) )- Then p* = p (a) and finish. 



A numerical example that demonstrates power allocations 
following from three cases is given in Section [ill] 

III. Fading BCCs 

In this section, we study the fading BCC, where the channel 
input-output relationship is given by 

Y i = h u X i + W i , Z i = h 2i X i +V i (12) 

where i is the time index. The channel gain coefficients hn 
and }%2i are proper complex random variables. We define := 
(hu, /i2i), and assume {h^} is a stationary and ergodic vector 
random process. The noise processes {Wi} and {Vi} are i.i.d. 
proper complex Gaussian with Wi and Vi having variances /i 2 
and v 2 , respectively. The input sequence {Xi} is subject to 
the average power constraint P, i.e., — ~^27=i E[X 2 ] < P. 

We assume that the channel state information (i.e., the 
realization of hj) is known at both the transmitter and the 
receivers instantaneously. The fading BCC can be viewed as a 
parallel Gaussian BCC with each fading state corresponding to 
one subchannel. Thus, the following secrecy capacity region 
of the fading BCC follows from Theorem Q] 

Corollary 2: The secrecy capacity region of the fading 
BCC is 

C*= U 

(po(h), P i(h))ev 

(Ro, Ri) : 
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(13) 



where A :— \h : > ^J-l. The random vector h = 

{h\, h 2 ) has the same distribution as the marginal distribution 
of the process {h^} at one time instant. The functions po(h) 
and pi (h) indicate the source powers allocated to transmit the 
common and confidential messages, respectively. The set V is 
defined as 

V = {(po(k),Pi(h)) : E A \po(h) +Pi(h)}+E A c\p (h)] < P\. 

(14) 

From the bound on Ri in ( fT3l ), it can be seen that as long 
as A is not a zero probability event, positive secrecy rate can 
be achieved. Since fading introduces more randomness to the 
channel, it is more likely that the channel from the source 
node to receiver 1 is better than the channel from the source 
node to receiver 2 for some channel states, and hence positive 
secrecy capacity can be achieved by exploiting these channel 
states. 

Since the source node is assumed to know the channel state 
information, it can allocate its power according to the instan- 
taneous channel realization to achieve the best performance, 
i.e., the boundary of the secrecy capacity region. Such optimal 
power allocations can be derived from Theorem[2] The details 
can be found in [16]. 

Remark 1: If the source node does not have common mes- 
sages for both receivers, and only has confidential messages 
for receiver 1, the fading BCC becomes the fading wire-tap 
channel. For this channel, Corollary [2] and Theorem [2] give 
the secrecy capacity and the optimal source power allocation 
obtained in [12], [13] and [14] (full CSI case). 

We now provide numerical results for the fading BCC. We 
consider the Rayleigh fading BCC, where hi and h 2 are zero 
mean proper complex Gaussian random variables. Hence \hi | 2 
and \h 2 \ 2 are exponentially distributed with parameters <ji and 
a 2 . We assume the source power P = 5 dB, and fix oi = 1. In 
Fig. |2j we plot the boundaries of the secrecy capacity regions 
corresponding to cr 2 = 0.4, 0.7, 1, respectively. It can be seen 
that as a 2 decreases, the secrecy rate Ri of the confidential 
message improves, but the rate Rq of the common message 
decreases. This fact follows because smaller a 2 implies worse 
channel from the source node to receiver 2. Thus, confidential 
information can be forwarded to receiver 1 at a larger rate. 
However, the rate of the common information is limited by 
the channel from the source node to receiver 2, and hence 
decreases as a 2 decreases. 

For the Rayleigh fading BCC with oi = 1 and a 2 = 0.4, we 
plot the boundary of the secrecy capacity region in Fig. [3] The 
three cases (see Theorem [2]) to derive the boundary achieving 
power allocations are also indicated with the corresponding 
boundary points. It can be seen that the boundary points with 
large Ri are achieved by the power allocations derived from 
Case 1, and are indicated by the line with circle on the graph. 
The boundary points with large Ro are achieved by the optimal 
power allocations derived from Case 2, and are indicated by 
the line with square. Between the boundary points achieved 
by Case 1 and Case 2, the boundary points are achieved by 
the power allocations derived from Case 3, and are indicated 
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Fig. 2. Secrecy capacity regions for Rayleigh fading BCCs 
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Fig. 3. Three cases in power allocation optimization to achieve the boundary 
of the secrecy capacity region for a Rayleigh fading BCC 



by the plain solid line. 

An intuitive reason why the three cases associate with 
the boundary points is given as follows. To achieve large 
secrecy rate R\, most channel states in the set A where 
receiver 1 has a stronger channel than receiver 2 are used 
to transmit the confidential message. The common message is 
hence transmitted mostly over the channel states in the set A°, 
over which the common rate is limited by the channel from 
the source node to receiver 1. Thus, power allocation needs 
to optimize the rate of this channel, and hence the optimal 
power allocation follows from Case 1. To achieve large Rq, 
the common message is forwarded over the channel states both 
in A and A c . Since in average the source node has a much 
worse channel to receiver 2 than to receiver 1, the channel 
from the source node to receiver 2 limits the common rate. 
Power allocation now needs to optimize the rate to receiver 
2, and hence follows from Case 2. Between these two cases, 
power allocation needs to balance the rates to receivers 1 and 
2 and hence follows from Case 3. 



IV. Conclusions 

We have established the secrecy capacity region for the 
parallel Gaussian BCC, and have characterized the optimal 
power allocations that achieve the boundary of this region. An 
interesting result we have established is the secrecy capacity 
region of the Gaussian case of the Csiszar and Korner BCC 
model. 

We have further applied our results to obtain the ergodic 
secrecy capacity region for the fading BCC. Our results 
generalize the secrecy capacity of the fading wire-tap channel 
that has been recently obtained in [12], [13] and [14] (full 
CSI case). We have also studied the outage performance of 
the fading BCC, the results of which are not presented in this 
paper due to space limitations; details can be found in [16]. 
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